Infecté

Résolu
Bonjour,
Qui pourrai me lire un rapport de ZHP Texte svp car je pense avoir des soucis merci de dire comment vous k'envoyer @+



--
NINI

5 réponses

  1. Modérateur
    Ouvre le bloc-notes : Menu Démarrer / Tous les programmes / Accessoires et Bloc-Notes.
    Copie/colle dedans ce qui suit :

    CHR HomePage: Default -> hxxp://istart.webssearches.com/?type=hp&ts=1416737059&from=obw&uid=HGSTXHTS541010A9E680_JD4000CHG9038PG9038PX [Pays US - 69.28.57.22]
    CHR StartupUrls: Default -> hxxp://istart.webssearches.com/?type=hp&ts=1416737059&from=obw&uid=HGSTXHTS541010A9E680_JD4000CHG9038PG9038PX [Pays US - 69.28.57.22]
    CHR DefaultSearchKeyword: Default -> webssearches
    ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
    ProxyServer: [.DEFAULT] => http=127.0.0.1:52612;https=127.0.0.1:52612
    ProxyServer: [S-1-5-21-3507101761-2711143210-323578003-1002] => http=127.0.0.1:60979;https=127.0.0.1:60979
    2014-11-23 11:05 - 2014-11-23 15:43 - 00000000 ____D () C:\Program Files (x86)\snipsmart
    2014-11-23 11:05 - 2014-11-23 15:16 - 00000000 ____D () C:\Program Files (x86)\SupTab
    2014-11-23 11:04 - 2014-11-23 15:17 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect

    Place toi sur le bureau.
    Dans le champs en bas, nom du fichier mets : fixlist.txt
    Clic sur Enregistrer - cela va créer un fichier fixlist.txt sur le bureau.

    Relance FRST et clic sur le bouton Fix
    Selon comment un redémarrage est nécessaire (pas obligatoire).
    Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

    1. voici rapport merci

      --Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 23-11-2014 01
      Ran by Nicole at 2014-11-24 11:41:10 Run:1
      Running from C:\Users\Nicole\Desktop
      Loaded Profile: Nicole (Available profiles: UpdatusUser & Nicole)
      Boot Mode: Normal
      ==============================================

      Content of fixlist:
      *****************

      CHR HomePage: Default -> hxxp://istart.webssearches.com/?type=hp&ts=1416737059&from=obw&uid=HGSTXHTS541010A9E680_JD4000CHG9038PG9038PX [Pays US - 69.28.57.22]
      CHR StartupUrls: Default -> hxxp://istart.webssearches.com/?type=hp&ts=1416737059&from=obw&uid=HGSTXHTS541010A9E680_JD4000CHG9038PG9038PX [Pays US - 69.28.57.22]
      CHR DefaultSearchKeyword: Default -> webssearches
      ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
      ProxyServer: [.DEFAULT] => http=127.0.0.1:52612;https=127.0.0.1:52612
      ProxyServer: [S-1-5-21-3507101761-2711143210-323578003-1002] => http=127.0.0.1:60979;https=127.0.0.1:60979
      2014-11-23 11:05 - 2014-11-23 15:43 - 00000000 ____D () C:\Program Files (x86)\snipsmart
      2014-11-23 11:05 - 2014-11-23 15:16 - 00000000 ____D () C:\Program Files (x86)\SupTab
      2014-11-23 11:04 - 2014-11-23 15:17 - 00000000 ____D () C:\ProgramData\WindowsMangerProtect

      *****************

      Chrome HomePage deleted successfully.
      Chrome StartupUrls deleted successfully.
      Chrome DefaultSearchKeyword deleted successfully.
      HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable => value deleted successfully.
      HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully.
      HKU\S-1-5-21-3507101761-2711143210-323578003-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyServer => value deleted successfully.
      C:\Program Files (x86)\snipsmart => Moved successfully.
      C:\Program Files (x86)\SupTab => Moved successfully.
      C:\ProgramData\WindowsMangerProtect => Moved successfully.

      ==== End of Fixlog ====
      NINI